Privacy Policy

Privacy Policy - Dealerpull Inc.

Dealerpull Inc. Privacy Policy

Last Updated: December 2025

Version: 2.0

Summary of Changes (Version 2.0)

This privacy policy has been comprehensively updated to improve transparency and compliance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada's Anti-Spam Legislation (CASL).

Table of Contents

  1. Introduction
  2. Accountability
  3. Information We Collect
  4. How We Use Your Information
  5. Information Sharing and Disclosure
  6. Cross-Border Data Transfers
  7. Data Retention
  8. Cookies and Tracking Technologies
  9. Session Recording and Monitoring
  10. Security
  11. Your Rights
  12. Breach of Security Safeguards
  13. Dealership Responsibilities
  14. Browser Extension Privacy
  15. Children's Privacy
  16. Messages and Notifications
  17. Changes to This Policy
  18. Contact Us

1. Introduction

At Dealerpull Inc. ("Dealerpull", "we", "our", "us"), we are committed to protecting your privacy and handling your personal information responsibly. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use our website, web-based applications, and mobile applications (collectively, our "Services").

This Privacy Policy applies to:

By using any of our Services, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy.

2. Accountability

Privacy Officer
Dealerpull Inc.
180 Northfield Dr. West, Unit 4
Waterloo, ON N2L 0C7
Email: privacy@dealerpull.com

3. Information We Collect

3.1 Information You Provide

Account Information: Business name, contact information, user names, email addresses, login credentials, billing information.

Dealership Operations Data: Vehicle inventory information, customer and lead information, deal records, documents, communication logs.

Credit Application Data: Customer information submitted by dealerships for financing purposes.

3.2 Information Collected Automatically

Technical Information: IP address, browser type, operating system, device information.

Usage Information: Pages visited, clickstream data, login times, error logs.

Cookies: Session cookies, persistent cookies, analytics cookies.

3.3 Information from Third Parties

We receive information from: Auth0 (authentication), Stripe (payments), credit bureaus via Dealertrack, ADF/XML lead providers, advertising platforms, service shop software providers, and inventory listing sites.

4. How We Use Your Information

We use personal information to: provide and improve our services, communicate with you, protect our services, and comply with legal obligations.

5. Information Sharing and Disclosure

5.1 Automotive Industry Partners

When dealerships enable integrations, we share vehicle and dealership information with: Trader.ca, Kijiji.ca, CarGurus, AutoTrader.ca, Carpages.ca, vAuto, Edealer, Hey Auto, OntarioCars, HomeNet/VinSolutions, custom dealer websites, and other automotive platforms.

No consumer personal information is shared with advertising platforms.

SiriusXM Canada: Dealerships may enable sharing of vehicle and customer information for SiriusXM services. Dealerpull receives compensation for this program.

Credit Services: Customer credit applications are transmitted to Dealertrack and financing providers.

5.2 Service Providers

Infrastructure: Microsoft Azure (Canada)

Authentication: Auth0

Payment: Stripe

Communications: Twilio, Intercom, MailChimp, TypeForm

Business Operations: Atlassian, HubSpot, QuickBooks, Lubrico

Monitoring: Datadog, Azure Application Insights

Product Development: LaunchDarkly, GhostInspector

6. Cross-Border Data Transfers

Some service providers process data outside Canada (primarily United States). We use Standard Contractual Clauses and ensure providers maintain appropriate safeguards. Your primary dealership data is stored in Microsoft Azure data centers in Canada.

7. Data Retention

Active Customer Data: Duration of subscription

After Cancellation: 45 days, then permanently deleted

Billing Records: 7 years (Canadian tax law requirement)

Support Communications: 3 years

Session Recordings: 30 days (up to 15 months for training)

System Logs: 15-90 days depending on type

8. Cookies and Tracking Technologies

Strictly Necessary: Session management, security, load balancing

Functional: User preferences and customizations

Analytics: Microsoft Application Insights, Datadog Real User Monitoring

You can manage cookies through your browser settings.

9. Session Recording and Monitoring

We use session recording to improve our services and provide support. We record mouse movements, clicks, page navigation, and form interactions (sensitive fields are masked). Recordings are retained for 30 days (up to 15 months for training purposes).

10. Security

We implement technical, administrative, and physical safeguards including: encryption, password protection, security assessments, access controls, employee training, and SOC 2 certified data centers.

Your Responsibilities: Maintain credential confidentiality, log out after sessions, use strong passwords, change passwords periodically (recommended every 90 days), and notify us of suspected unauthorized access.

11. Your Rights

Under PIPEDA, you have rights to:

Contact our Privacy Officer at privacy@dealerpull.com. We respond within 30 days.

12. Breach of Security Safeguards

In case of a breach, we will assess, contain, remediate, and notify affected parties as required by PIPEDA. Contact us immediately if you suspect a breach: privacy@dealerpull.com

13. Dealership Responsibilities

Dealerships are data controllers for customer information they collect. They are responsible for obtaining consent, ensuring compliance with privacy laws, responding to privacy requests, and maintaining appropriate privacy policies.

14. Browser Extension Privacy

The Dealerpull Facebook Marketplace Auto-Fill extension:

15. Children's Privacy

Our Services are not intended for individuals under 18. We do not knowingly collect information from minors.

16. Messages and Notifications

We send service communications (required for operations) and marketing communications (with consent, in compliance with CASL). Unsubscribe anytime via email links or by contacting us.

17. Changes to This Policy

We may update this policy at any time. For significant changes, we will notify you by email and post a notice in our application. Your continued use constitutes acceptance of changes.

18. Contact Us

Privacy Officer
Dealerpull Inc.
180 Northfield Dr. West, Unit 4
Waterloo, ON N2L 0C7
Canada
Email: privacy@dealerpull.com

Response Time: We aim to respond within 30 days.


Additional Information

Governing Law: Province of Ontario and federal laws of Canada

Third-Party Links: This policy does not apply to linked third-party sites

Accessibility: Contact our Privacy Officer for alternative formats

Dealerpull Inc.
© 2025 All Rights Reserved